Principal Enterprise Identity Engineer

Genentech

Confirmed live today High trust

Quick summary

Work type
On-site
Location
South San Francisco, CA
Salary
$114,900–$263,500 / yr
Employment
Full-time
Posted
1 day ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $190k
This role $189k
$97k most similar roles pay here $281k

This role pays more than 51% of similar roles. Most pay $160,581–$220,000 — the shaded band above. At the midpoint, this role pays about $189k versus about $190k for comparable roles.

Based on 240 similar postings.

Employer

About Genentech

Genentech is a leading research-driven company dedicated to discovering and developing, manufacturing, and commercializing medicines for people with serious and life-threatening diseases.

Genentech currently has 8 open roles on FindRole.

Listed pay typically runs $149,400–$277,500 across 8 roles with salary data.

Most-posted roles

View all roles at Genentech

At a glance

TL;DR · Principal Enterprise Identity Engineer

As the Principal Enterprise Identity Engineer - RDT Identity & Access Management, you will serve as the technical authority and visionary for the global Enterprise Identity Management and Identity Governance and Administration landscape. You will define multi-year identity strategies, drive zero-trust initiatives, and architect resilient, scalable frameworks to protect critical assets while enabling seamless operations. Your daily work involves establishing engineering standards, overseeing SailPoint-based solutions, and pioneering technologies like decentralized identity and ML-driven access analytics. The role requires expert proficiency in Java, Python, and multi-cloud environments including AWS, Azure, and GCP, alongside experience with CI/CD pipelines and microservices. You will mentor senior engineers and resolve complex systemic issues across various layers of infrastructure. This position addresses the challenge of securing a massive, distributed ecosystem within highly regulated, multinational enterprise environments.

What you'll do

  • Define the multi-year roadmap and technical strategy for global enterprise identity and zero-trust frameworks.
  • Establish enterprise-wide architecture patterns and engineering standards across identity, cloud, and infrastructure domains.
  • Architect and oversee the deployment of large-scale SailPoint-based EIM solutions.
  • Translate complex security requirements and regulatory mandates into actionable strategies for executive leadership.
  • Pioneer the adoption of emerging technologies like decentralized identity and ML-driven access analytics.
  • Serve as the technical authority for high-level escalations and root-cause analysis of systemic issues.
  • Mentor senior engineers and lead cross-functional teams to build a global identity community.

What we're looking for

  • Minimum of 8-10 years of hands-on engineering experience in Cybersecurity and Identity Management.
  • At least 5 years of experience operating at an enterprise architecture or principal level.
  • 5+ years of experience steering identity strategies in highly regulated, multinational enterprise environments (Healthcare or Finance preferred).
  • Deep-tier technical expertise in SailPoint (IdentityNow/IdentityIQ) for enterprise-scale design and deployment.
  • Expert-level proficiency in Java and Python for developing complex connectors and automated workflows.
  • Proven track record of architecting integration solutions across multi-cloud environments (AWS, Azure, GCP) with CI/CD and DevOps knowledge.
  • Bachelor’s or Advanced degree in Computer Science, Cyber Security, Information Technology, or a related field.
  • CISSP, CISM, or CIAM certifications; advanced AWS/Azure/GCP Architecture or SailPoint certifications (preferred).

More like this

Similar roles

Identity Security Distinguished Engineer

GEICO

Bethesda, MD +3 19 days ago $140,000–$300,000
IAM Active Directory Kerberos LDAP SAML SCIM OAuth OIDC Python Go AWS GCP Azure REST APIs Linux Windows TLS AES X.509 MITRE CIS NIST PCI SOC
8+ yrs exp